Practical considerations for imaging and printing security
Page 6
...of web services such as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is the recommended protocol for securing printing and scanning functions. 6 The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a ...by hostile network environments. • Chai HP's Chai provides a means to extend an imaging and printing device's functionality. HP Secure Erase HP Secure Erase implements the Department of Defense (DoD) 5220-22m specification for the deletion of data from attaching devices...
...of web services such as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is the recommended protocol for securing printing and scanning functions. 6 The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a ...by hostile network environments. • Chai HP's Chai provides a means to extend an imaging and printing device's functionality. HP Secure Erase HP Secure Erase implements the Department of Defense (DoD) 5220-22m specification for the deletion of data from attaching devices...
HP Jetdirect Security Guidelines
Page 10
...server, it can perform effective MITM attacks against TCP/IP MITM attacks is analogously similar to a person not being able to upgrade HP Jetdirect devices is described here: http://h20000.www2.hp...to behave in the same manner. However, printer/MFPs can record conversations. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. If...a print job can use the EWS to plant the listening device in the conference room and instead pulling a fire alarm in a conference room to this means is not a vulnerability specific to...
...server, it can perform effective MITM attacks against TCP/IP MITM attacks is analogously similar to a person not being able to upgrade HP Jetdirect devices is described here: http://h20000.www2.hp...to behave in the same manner. However, printer/MFPs can record conversations. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. If...a print job can use the EWS to plant the listening device in the conference room and instead pulling a fire alarm in a conference room to this means is not a vulnerability specific to...
HP Jetdirect 620n Print Server Setup Guide
Page 5
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 B. Warranty Service F.
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 B. Warranty Service F.
HP Jetdirect 620n Print Server Setup Guide
Page 10
... (or similar device) is useful for specific instructions. Verify Printer Operation To verify that your printer documentation for this purpose. To print a Printer Configuration page, see your printer is provided to print a Printer Configuration page varies with any ... map is working properly, print a Printer Configuration page. Handle the card carefully at all times. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that displays status information. For example, HP DesignJet printers provide a "Service Configuration print" that can be damaged by...
... (or similar device) is useful for specific instructions. Verify Printer Operation To verify that your printer documentation for this purpose. To print a Printer Configuration page, see your printer is provided to print a Printer Configuration page varies with any ... map is working properly, print a Printer Configuration page. Handle the card carefully at all times. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that displays status information. For example, HP DesignJet printers provide a "Service Configuration print" that can be damaged by...
HP Jetdirect 620n Print Server Setup Guide
Page 26
...HP Jetdirect CD-ROM. If a network protocol is enabled, the card may increase network traffic. This may actively transmit on the network even when there are enabled (or turned on) whenever you : ● reduce network traffic by eliminating users from the factory, all enabled protocols. ● display protocol-specific error conditions on the print server... through a variety of tools, such as Telnet, Web browser access to this printer. ● eliminate unnecessary information on the Jetdirect Configuration Page, which ...
...HP Jetdirect CD-ROM. If a network protocol is enabled, the card may increase network traffic. This may actively transmit on the network even when there are enabled (or turned on) whenever you : ● reduce network traffic by eliminating users from the factory, all enabled protocols. ● display protocol-specific error conditions on the print server... through a variety of tools, such as Telnet, Web browser access to this printer. ● eliminate unnecessary information on the Jetdirect Configuration Page, which ...
HP Jetdirect 620n Print Server Setup Guide
Page 45
D Specifications and Regulatory Statements Specifications HP Jetdirect EIO Internal Print Server ● HP J7934A (620n) ● HP J6057A (615n) Ethernet/Fast Ethernet, IEEE 802.3 and IEEE 802.3u 10/100Base-TX (RJ-45) Electrical 1.25 A maximum @ 3.3 V nominal Environmental Temperature Relative Humidity (non-....) Non-Operating -40°C to 70°C (-40°F to 158°F) 15% to 90% at 65°C (149°F) 4.6 km (15,000 ft.) ENWW Specifications and Regulatory Statements 45
D Specifications and Regulatory Statements Specifications HP Jetdirect EIO Internal Print Server ● HP J7934A (620n) ● HP J6057A (615n) Ethernet/Fast Ethernet, IEEE 802.3 and IEEE 802.3u 10/100Base-TX (RJ-45) Electrical 1.25 A maximum @ 3.3 V nominal Environmental Temperature Relative Humidity (non-....) Non-Operating -40°C to 70°C (-40°F to 158°F) 15% to 90% at 65°C (149°F) 4.6 km (15,000 ft.) ENWW Specifications and Regulatory Statements 45
HP Jetdirect 620n Print Server Setup Guide
Page 48
...Packard GmbH, HQ-TRE, Herrenberger Straße 140, 71034 Böblingen, Germany USA Contact: Hewlett Packard Co. HP Jetdirect Print Servers DECLARATION OF CONFORMITY according to the following Product Specifications: Safety: EN60950 (1992) +A1,A2,A3,A4,AII / IEC 950 (1991) +A1,A2,A3,A4 ...is Class-A Supplementary Information: The product herewith complies with Hewlett-Packard Co. products. declares that the product: Product Name: HP Jetdirect 615N,620N Model Number: J6057A* J7934A (Regulatory Model: RSVLD-0302) conforms to ISO/IEC Guide 22 and EN45014 Manufacturer's Name: Hewlett...
...Packard GmbH, HQ-TRE, Herrenberger Straße 140, 71034 Böblingen, Germany USA Contact: Hewlett Packard Co. HP Jetdirect Print Servers DECLARATION OF CONFORMITY according to the following Product Specifications: Safety: EN60950 (1992) +A1,A2,A3,A4,AII / IEC 950 (1991) +A1,A2,A3,A4 ...is Class-A Supplementary Information: The product herewith complies with Hewlett-Packard Co. products. declares that the product: Product Name: HP Jetdirect 615N,620N Model Number: J6057A* J7934A (Regulatory Model: RSVLD-0302) conforms to ISO/IEC Guide 22 and EN45014 Manufacturer's Name: Hewlett...
HP Jetdirect 620n Print Server Setup Guide
Page 51
..., THE ABOVE WARRANTIES ARE EXCLUSIVE AND NO OTHER WARRANTY OR CONDITION, WHETHER WRITTEN OR ORAL, IS EXPRESSED OR IMPLIED AND HP SPECIFICALLY DISCLAIMS ANY IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, AND FITNESS FOR A PARTICULAR PURPOSE. The level of warranty ... might also have been subject to incidental use. 5. ENWW Warranty Service 51 E Warranty Service HEWLETT-PACKARD LIMITED WARRANTY STATEMENT HP PRODUCT HP Jetdirect 620n/615n Print Servers J7934A, J6057A) Software on the duration of an implied warranty, so the above , due to defects in any product to...
..., THE ABOVE WARRANTIES ARE EXCLUSIVE AND NO OTHER WARRANTY OR CONDITION, WHETHER WRITTEN OR ORAL, IS EXPRESSED OR IMPLIED AND HP SPECIFICALLY DISCLAIMS ANY IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, AND FITNESS FOR A PARTICULAR PURPOSE. The level of warranty ... might also have been subject to incidental use. 5. ENWW Warranty Service 51 E Warranty Service HEWLETT-PACKARD LIMITED WARRANTY STATEMENT HP PRODUCT HP Jetdirect 620n/615n Print Servers J7934A, J6057A) Software on the duration of an implied warranty, so the above , due to defects in any product to...
HP Jetdirect Administrator's Guide
Page 37
... no connection to two minutes are enabled by default. HP Jetdirect Wireless Print Server. When initially powered on an Ad Hoc network is unlikely, and the number of IP settings from a BOOTP server on , a factory-default wired/wireless print server that require a specific default IP address on the print server, see the Jetdirect configuration page. In this parameter may not work...
... no connection to two minutes are enabled by default. HP Jetdirect Wireless Print Server. When initially powered on an Ad Hoc network is unlikely, and the number of IP settings from a BOOTP server on , a factory-default wired/wireless print server that require a specific default IP address on the print server, see the Jetdirect configuration page. In this parameter may not work...
HP Jetdirect Administrator's Guide
Page 43
... be the first field in Table 3.1. On HP Jetdirect external print servers, it is printed on the HP Jetdirect configuration page as the HARDWARE ADDRESS. This address will be found on a label attached to a list of parameters for a specific peripheral. Bootptab File Entries An example of a /etc/bootptab file entry for an HP Jetdirect print server is provided below: picasso:\ :hn:\ :ht...
... be the first field in Table 3.1. On HP Jetdirect external print servers, it is printed on the HP Jetdirect configuration page as the HARDWARE ADDRESS. This address will be found on a label attached to a list of parameters for a specific peripheral. Bootptab File Entries An example of a /etc/bootptab file entry for an HP Jetdirect print server is provided below: picasso:\ :hn:\ :ht...
HP Jetdirect Administrator's Guide
Page 44
... an SNMP sysName request by the HP Jetdirect print server to the vendor-specific tag T144, described below. Only a single name server can be specified in a BOOTP/DHCP Boot file (2 of 4) RFC 2132 Option Description sm 1 The subnet mask tag. It specifies the server that the HP Jetdirect print server sends syslog messages to the HP Jetdirect print server. hn 12 The host name tag...
... an SNMP sysName request by the HP Jetdirect print server to the vendor-specific tag T144, described below. Only a single name server can be specified in a BOOTP/DHCP Boot file (2 of 4) RFC 2132 Option Description sm 1 The subnet mask tag. It specifies the server that the HP Jetdirect print server sends syslog messages to the HP Jetdirect print server. hn 12 The host name tag...
HP Jetdirect Administrator's Guide
Page 46
... packets is required before the printer is allowed to specify the TFTP server's IP address where the TFTP configuration file is not allowed. TFTP server's IP address option. An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be... either "BOOTP-ONLY" or "DHCP-ONLY" requests be downloaded using the /etc/bootptab file's T144 vendor-specific tag (or the "ef" standard BOOTP tag) entry. ENWW TCP/IP Configuration 46 An HP-proprietary tag that the entry is 1 (default). : Option value 0 (default) disables interlock, 1 enables...
... packets is required before the printer is allowed to specify the TFTP server's IP address where the TFTP configuration file is not allowed. TFTP server's IP address option. An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be... either "BOOTP-ONLY" or "DHCP-ONLY" requests be downloaded using the /etc/bootptab file's T144 vendor-specific tag (or the "ef" standard BOOTP tag) entry. ENWW TCP/IP Configuration 46 An HP-proprietary tag that the entry is 1 (default). : Option value 0 (default) disables interlock, 1 enables...
HP Jetdirect Administrator's Guide
Page 52
...example, "interlock 1 1" specifies Port 1, interlock enabled. Valid ports are 3000 to 9000, which are specified. banner: A port-specific parameter that specifies printing an LPD banner page. 0 disables banner pages. 1 (default) enables banner pages. A Port Number and Option value are application-... data is sent to TCP port 9100. For current HP Jetdirect print servers, the Port Number is received. Option value 0 (default) disables interlock, 1 enables. The push bit is set . 1: all data packets. TCP/IP Raw Print Ports raw-port: (addrawport:) Specifies additional ports for TCP...
...example, "interlock 1 1" specifies Port 1, interlock enabled. Valid ports are 3000 to 9000, which are specified. banner: A port-specific parameter that specifies printing an LPD banner page. 0 disables banner pages. 1 (default) enables banner pages. A Port Number and Option value are application-... data is sent to TCP port 9100. For current HP Jetdirect print servers, the Port Number is received. Option value 0 (default) disables interlock, 1 enables. The push bit is set . 1: all data packets. TCP/IP Raw Print Ports raw-port: (addrawport:) Specifies additional ports for TCP...
HP Jetdirect Administrator's Guide
Page 53
...Enables or disables the Service Location Protocol (SLP) operation on network 192. Each entry specifies a host or network of hosts that the HP Jetdirect print server sends syslog messages to 10 access list entries are disabled. If there are no entries, all priorities are permitted access. syslog-max: ...in priority) are allowed to connect to verify access. syslog-priority: Controls the filtering of syslog messages sent to 8, with 0 being the most specific and 8 the most general. The default is "allow : 192.168.1.2 allows a single host. The format is 8, messages of all hosts are...
...Enables or disables the Service Location Protocol (SLP) operation on network 192. Each entry specifies a host or network of hosts that the HP Jetdirect print server sends syslog messages to 10 access list entries are disabled. If there are no entries, all priorities are permitted access. syslog-max: ...in priority) are allowed to connect to verify access. syslog-priority: Controls the filtering of syslog messages sent to 8, with 0 being the most specific and 8 the most general. The default is "allow : 192.168.1.2 allows a single host. The format is 8, messages of all hosts are...
HP Jetdirect Administrator's Guide
Page 63
...DDNS) for additional support, see the bootpd man page. For specific information or for its IP configuration. Windows Systems HP Jetdirect print servers support IP configuration from IP addresses that change, HP recommends that all print server lease durations to "infinite". This section describes how to any ... pool, or "scope," of IP addresses that the Windows server can assign or lease to set up DHCP on , the HP Jetdirect print server automatically sends a BOOTP or DHCP request for its DHCP implementations, HP recommends that you set all printers be located in the /etc...
...DDNS) for additional support, see the bootpd man page. For specific information or for its IP configuration. Windows Systems HP Jetdirect print servers support IP configuration from IP addresses that change, HP recommends that all print server lease durations to "infinite". This section describes how to any ... pool, or "scope," of IP addresses that the Windows server can assign or lease to set up DHCP on , the HP Jetdirect print server automatically sends a BOOTP or DHCP request for its DHCP implementations, HP recommends that you set all printers be located in the /etc...
HP Jetdirect Administrator's Guide
Page 86
...information, see Appendix A. syslog-max Specifies the maximum number of syslog messages that can be sent by the HP Jetdirect print server on the HP Jetdirect print server. The default is not restricted. allow Makes an entry into the host access list stored on a per...or groups of hosts that the HP Jetdirect print server sends syslog messages to 8, with 0 being the most specific and 8 the most general. allow 192.0.0.0 255.0.0.0 allows hosts on the print server: 0 disables, 1 (default) enables. (UDP port 514) syslog-svr The syslog server's IP address in priority) are...
...information, see Appendix A. syslog-max Specifies the maximum number of syslog messages that can be sent by the HP Jetdirect print server on the HP Jetdirect print server. The default is not restricted. allow Makes an entry into the host access list stored on a per...or groups of hosts that the HP Jetdirect print server sends syslog messages to 8, with 0 being the most specific and 8 the most general. allow 192.0.0.0 255.0.0.0 allows hosts on the print server: 0 disables, 1 (default) enables. (UDP port 514) syslog-svr The syslog server's IP address in priority) are...
HP Jetdirect Administrator's Guide
Page 94
...Specifies the number of seconds (1 - 3600) that supports bi-directional communications between the HP Jetdirect print server and the device. ● Full Speed: 12 Mbits/sec as specified in the USB v2.0 specifications, compatible with your multifunction or all-in one peripheral. 0 (default): disables client...Telnet Commands and Parameters (16 of 18) webscan-config (Web Scan Config) Enables or disables the Web Scan feature on the HP Jetdirect print server. ● Auto (default): Automatically negotiates and sets the highest communication mode possible for USB v2.0 devices only. ●...
...Specifies the number of seconds (1 - 3600) that supports bi-directional communications between the HP Jetdirect print server and the device. ● Full Speed: 12 Mbits/sec as specified in the USB v2.0 specifications, compatible with your multifunction or all-in one peripheral. 0 (default): disables client...Telnet Commands and Parameters (16 of 18) webscan-config (Web Scan Config) Enables or disables the Web Scan feature on the HP Jetdirect print server. ● Auto (default): Automatically negotiates and sets the highest communication mode possible for USB v2.0 devices only. ●...
HP Jetdirect Administrator's Guide
Page 116
... A value of syslog messages that is , higher in (for WINS if the primary WINS Server Server is used to connect to receive syslog messages from the HP Jetdirect print server. Domain Name Specifies the name of a router or computer that can be sent by the ... HP Jetdirect print server resides in priority) are disabled. The WINS server provides IP address and name resolution services for example, a workstation). Syslog Server Specifies the IP address of syslog messages that , when applied to control the log file size. Up to 8, with 0 being the most specific ...
... A value of syslog messages that is , higher in (for WINS if the primary WINS Server Server is used to connect to receive syslog messages from the HP Jetdirect print server. Domain Name Specifies the name of a router or computer that can be sent by the ... HP Jetdirect print server resides in priority) are disabled. The WINS server provides IP address and name resolution services for example, a workstation). Syslog Server Specifies the IP address of syslog messages that , when applied to control the log file size. Up to 8, with 0 being the most specific ...
HP Jetdirect Administrator's Guide
Page 133
... page data sent to set by the print server is reported on , to activate it. ● Automatic (default): The print server will be displayed. USB Settings If the HP Jetdirect print server provides a USB connection to the network device (such as specified in the USB v2.0 specifications, compatible with USB v1.1 specifications. ● Hi-Speed: 480 Mbits/sec for USB...
... page data sent to set by the print server is reported on , to activate it. ● Automatic (default): The print server will be displayed. USB Settings If the HP Jetdirect print server provides a USB connection to the network device (such as specified in the USB v2.0 specifications, compatible with USB v1.1 specifications. ● Hi-Speed: 480 Mbits/sec for USB...
HP Jetdirect Administrator's Guide
Page 141
Self-signed certificates are prompted for specific device and organizational information in the following screen:...'s certificate store or disables browser alerts (not recommended). Create Certificate Request. ENWW Using the Embedded Web Server 141 Note If you improperly exit Certificates configuration (for example, by a trusted third party or Certificate Authority... ● Certificate Information This option may appear. When received, the certificate is a Jetdirect certificate request (to use the Cancel button), an Operation Failed screen may be used, for example, when...
Self-signed certificates are prompted for specific device and organizational information in the following screen:...'s certificate store or disables browser alerts (not recommended). Create Certificate Request. ENWW Using the Embedded Web Server 141 Note If you improperly exit Certificates configuration (for example, by a trusted third party or Certificate Authority... ● Certificate Information This option may appear. When received, the certificate is a Jetdirect certificate request (to use the Cancel button), an Operation Failed screen may be used, for example, when...